$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: Ux8cTvRAOXwgGfc5vpYaFWj40QvJK+wDOoIEomvoOdg= Subject key identifier: F5:22:50:E1:17:C5:5F:5C:70:1D:D8:77:6A:ED:17:E9:DE:2F:F1:62 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 36E4CB87798A2F506C05435D6842B3E87CE71D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0229 Signing time: Sat 28 Feb 2026 15:31:54 +0000 Manifest this update: Sat 28 Feb 2026 15:26:54 +0000 Manifest next update: Tue 03 Mar 2026 20:44:54 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 4CwgBLcTBpkHqhEOcr4XAJjSMWpUgRfmaZytMUnNNxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e4:cb:87:79:8a:2f:50:6c:05:43:5d:68:42:b3:e8:7c:e7:1d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Feb 28 15:26:54 2026 GMT Not After : Mar 3 20:44:54 2026 GMT Subject: CN=F52250E117C55F5C701DD8776AED17E9DE2FF162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:61:48:3d:e4:c5:98:7a:c6:3d:b7:57:ad: ab:51:e2:40:32:f7:23:fc:f1:60:d8:bc:4f:34:a3: 69:1d:73:fa:5e:5e:5e:e9:22:91:54:0b:02:b6:89: 00:36:9e:ef:ab:b0:d7:97:78:87:50:7a:a9:22:10: c6:36:25:b4:65:95:ef:75:9a:0f:3f:6f:6d:5a:52: 8e:87:a9:ac:9f:95:bb:46:6c:1c:4a:7e:0e:02:16: 43:e6:58:f8:e3:36:ec:31:8b:d7:4f:06:9e:eb:08: 53:d6:58:98:d2:c6:5d:24:06:f2:e1:9d:3e:b1:a9: 2d:a5:c6:42:00:c4:ce:21:02:d4:eb:15:48:bb:c0: df:90:83:b8:d8:39:ef:87:97:f4:52:13:23:a6:b8: c7:32:8c:e7:b4:a9:94:00:9c:e9:2b:fd:96:ff:27: 53:1b:6c:94:20:da:50:a1:3e:81:6a:2b:7b:e8:38: 1c:7b:f9:8a:ff:f8:c7:ed:cc:81:28:cf:f0:60:ed: 03:a7:a0:ef:83:fe:a9:03:c1:be:39:d0:f2:37:54: 2f:b2:a4:cb:2c:9b:93:a5:52:60:22:33:46:77:38: a6:54:56:e2:f9:98:f1:7b:88:9e:d4:bc:db:2b:30: 0d:90:88:34:5c:82:28:8e:63:5b:5b:f8:e7:aa:84: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:22:50:E1:17:C5:5F:5C:70:1D:D8:77:6A:ED:17:E9:DE:2F:F1:62 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:76:4d:22:5a:e7:c2:fc:08:f5:0d:17:00:61:2a:36:26: 47:c1:5f:c0:16:b7:aa:fc:df:0e:8b:03:04:2f:34:16:5e:f3: 25:d3:6b:fb:13:d3:b5:23:be:10:92:31:4a:e9:b0:49:fb:58: 99:b9:d1:2d:ea:5b:12:36:a7:f8:e4:b9:61:f2:8a:d3:36:b4: 39:6b:04:85:af:8c:0d:1d:e8:9d:76:bf:3b:6e:c9:5d:b0:3b: 5e:eb:95:a4:64:63:3e:cd:71:97:b9:fc:83:f5:35:51:22:b9: d3:c7:78:a6:03:f3:f7:8d:3c:90:d3:2e:f3:05:c2:34:f8:3b: 4d:6b:f9:01:c7:09:1e:8b:a3:2b:c3:d7:6e:a9:c4:3b:c1:7b: d7:76:f6:7b:a0:a1:80:40:e6:10:ee:79:92:24:77:1a:0d:66: ac:9a:48:a4:05:07:32:49:c9:45:a6:f0:5e:91:8a:14:00:f6: e9:cc:b0:dd:8e:26:39:5e:6f:ba:85:94:1f:e4:dd:22:e5:19: c1:cb:90:b6:fe:10:2d:35:5c:71:7c:64:1c:3b:cf:a1:bf:78: 43:4c:cb:85:fe:e8:07:cc:1f:c9:c0:a4:00:1c:20:91:75:91: 0b:d3:d2:2a:19:62:63:cf:af:b6:98:55:68:12:99:3b:ac:85: 8f:4f:0e:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuTLh3mKL1BsBUNdaEKz6HznHY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjAyMjgxNTI2NTRaFw0yNjAzMDMyMDQ0NTRaMDMxMTAvBgNV BAMTKEY1MjI1MEUxMTdDNTVGNUM3MDFERDg3NzZBRUQxN0U5REUyRkYxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1L2FIPeTFmHrGPbdXratR4kAy 9yP88WDYvE80o2kdc/peXl7pIpFUCwK2iQA2nu+rsNeXeIdQeqkiEMY2JbRlle91 mg8/b21aUo6HqayflbtGbBxKfg4CFkPmWPjjNuwxi9dPBp7rCFPWWJjSxl0kBvLh nT6xqS2lxkIAxM4hAtTrFUi7wN+Qg7jYOe+Hl/RSEyOmuMcyjOe0qZQAnOkr/Zb/ J1MbbJQg2lChPoFqK3voOBx7+Yr/+MftzIEoz/Bg7QOnoO+D/qkDwb450PI3VC+y pMssm5OlUmAiM0Z3OKZUVuL5mPF7iJ7UvNsrMA2QiDRcgiiOY1tb+OeqhMQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9SJQ4RfFX1xwHdh3au0X6d4v8WIwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvOdk0iWufC/Aj1DRcAYSo2JkfBX8AWt6r8 3w6LAwQvNBZe8yXTa/sT07UjvhCSMUrpsEn7WJm50S3qWxI2p/jkuWHyitM2tDlr BIWvjA0d6J12vztuyV2wO17rlaRkYz7NcZe5/IP1NVEiudPHeKYD8/eNPJDTLvMF wjT4O01r+QHHCR6LoyvD126pxDvBe9d29nugoYBA5hDueZIkdxoNZqyaSKQFBzJJ yUWm8F6RihQA9unMsN2OJjleb7qFlB/k3SLlGcHLkLb+EC01XHF8ZBw7z6G/eENM y4X+6AfMH8nApAAcIJF1kQvT0ioZYmPPr7aYVWgSmTushY9PDvg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:13 2026 by rpki-client